What do you like about ansible? I guess it abstracts away the need to check for OS/init system? How else does it help in place of shell scripts?

Also after using NixOS, it’s amazing what NixOS does and disappointing that ansible is not so great for deterministic config ^[1], its more or less a batch of commands executed together. The closest thing, to NixOS, I’ve been able to achieve is load a variables file in playbook.yml and enable/disable service or install/purge pkg based on variables declared. I might be nitpicking/wrong given I’ve not been using long enough but directory layout is kinda too verbose. I say that because it’ll get really messy very quickly when writing modules for more services. NixOS is great, you only have to have configuration.nix or flake.nix+flake.lock too (if using flakes) and rest you can import however you like.

I wouldn’t be so sure it doesn’t affect NixOS^[1].

I am not a security researcher, nor a reverse engineer. There’s lots of stuff I have not analyzed and most of what I observed is purely from observation rather than exhaustively analyzing the backdoor code.

Also, it may take 10 days to downgrade the package^[2].